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DETAILED ACTION 
Examiner 's Notes 

1 . The Examiner has referenced three press releases regarding the same product. These 
press releases (From Panda Security Internacional; dated Jan. 17, 2001; Nov. 15, 2001; and Nov. 
26, 2002) all reference a single embodiment ("Panda ActiveScan" 4.0), but when cited, the 
Examiner has referred to them chronologically as "Release 1," "Release 2," and "Release 3." 
(MPEP 2131.01) 

Claim Rejections - 35 USC § 101 
35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of matter, or 
any new and useful improvement thereof, may obtain a patent therefor, subject to the conditions and 
requirements of this title. 

2. Claims 13-21 are rejected under 35 U.S.C. 101 because the claimed invention is directed 
to non-statutory subject matter. These claims recite a "computer program product" and do not 
positively recite that the instructions are stored on a tangible device nor are they used to cause a 
device to operate. Therefore, the Examiner has to interpret these claims as being to software, 
which is per se, non-statutory. Wording, such as, "A computer readable medium containing 
instructions that when executed cause a computer to. . ." would allow these claims to be 
interpreted as being statutory. 

Claim Rejections - 35 USC §103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
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having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claims 1-30 are rejected under 35 U.S.C. 103(a) as being unpatentable over Panda 
ActiveScan in view of Dent (6,311,171). 

3. As to claims 1,13, and 22; Panda ActiveScan shows: 

A method of disabling malicious code residing on a customer computer system in 
association with providing on-line financial services to a customer through a 

* 

network, the method comprising: 

presenting to the customer an option to perform a scan of the customer computer 
system for the malicious code (Release 3, Paragraph 7); 

executing, at least in part by activation over the network (Release 3, Paragraph 5) and 
upon receiving from the customer a selection of the option to perform the scan, 
computer program instructions for performing the scan, the computer program 
instructions being directed to detection and disablement of the malicious code 
(Release 3, Paragraph 3); 

4. Panda ActiveScan does not expressly show: 

authenticating the customer for the on-line financial services; 
providing the on-line financial services to the customer. 

5. Dent shows authenticating a customer through use of public key/private key encryption in 
order to process an online financial transaction (Figure 2). It would have been obvious to one of 
ordinary skill in the art at the time of the invention to have modified the invention Panda 
ActiveScan to reside on the website of a financial institution, because webmasters were invited 
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to include the functionality (Panda ActiveScan; Release 3, Paragraph 7) and security at a 
financial institution is a major concern. 

6. As to claim 2, 14, and 23; Panda ActiveScan further shows: 

the executing of the computer program instructions further comprises downloading 
the computer program instructions to the customer computer system (Release 1 , 
Paragraphs 8-10). 

7. As to claim 3, 15, and 24; Panda ActiveScan further shows: 

the executing of the computer program instructions is accomplished at least in part 
through the use of an ActiveX control (Release 1, Paragraph 7). 

8. As to claim 4, 16, and 25; Panda ActiveScan further shows: 

the computer program instructions are operable to perform signature-based detection 
of the malicious code (Release 2, Paragraph 7). 

9. As to claim 5, 17, and 26; Dent, in the combination above, shows: 

the computer program instructions are operable to perform integrity checking 
(Through keys, as mentioned; Figure 2). 

10. As to claim 6, 18, and 27 Panda ActiveScan further shows: 

the computer program instructions are operable to perform non-integrity-based 
unknown malicious code detection (Heuristic scan engine; Release 3, Paragraph 

2). 

11. As to claim 7, 19, and 28; Panda ActiveScan further shows: 

the computer program instructions are operable to perform signature-based detection 
of the malicious code (Release 2, Paragraph 7). 
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12. As to claim 8, 20, and 29; Dent, in the combination above, shows: 

the computer program instructions are operable to perform integrity checking 
(Through keys, as mentioned; Figure 2). 

13. As to claim 9, 21 , and 30; Panda ActiveScan further shows: 

the computer program instructions are operable to perform non-integrity-based 
unknown malicious code detection (Heuristic scan engine; Release 3, Paragraph 

2). 

14. As to claim 10, Panda ActiveScan shows: 

Apparatus for disabling malicious code residing on a customer computer system in 
association with providing on-line financial services to a customer through a 
network, the apparatus comprising: 

means for executing, at least in part by activation over the network (Release 3, 
Paragraph 5), computer program instructions for performing a scan for the 
malicious code, the computer program instructions being directed to detection and 
disablement of the malicious code (Release 3, Paragraph 3); 

15. Panda ActiveScan does not expressly show: 

means for authenticating the customer for the on-line financial services; 
means for providing the on-line financial services to the customer. 

16. Dent shows authenticating a customer through use of public key/private key encryption in 
order to process an online financial transaction (Figure 2). It would have been obvious to one of 
ordinary skill in the art at the time of the invention to have modified the invention Panda 
ActiveScan to reside on the website of a financial institution, because webmasters were invited 
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to include the functionality (Panda ActiveScan; Release 3, Paragraph 7) and security at a 
financial institution is a major concern. 

1 7. As to claim 1 1 , Panda ActiveScan further shows: 

the means for executing the computer program instructions further comprises means 
for downloading the computer program instructions to the customer computer 
system (Release 1, Paragraphs 8-10). 

1 8. As to claim 12, Panda ActiveScan further shows: 

the means for executing the computer program instructions further comprises an 
ActiveX control (Release 1, Paragraph 7). 

19. While treated together and the method limitations directly addressed, it is recognized that 
claims 13-21 are to the software and 22-30 are to the system. The software instructions claimed 
would cause a computer to perform the noted method if they were caused to execute. Also, the 
system claimed would also need to be present to perform the associated method. 

20. Applicant(s) are reminded that optional or conditional elements {e.g. claims 4-9 which 
recite "the computer program instructions are operable to perform. . .") do not narrow the claims 
because they can always be omitted. See e.g. MPEP §2106 II C. : "Language that suggests or 
makes optional but does not require steps to be performed or does not limit a claim to a particular 
structure does not limit the scope of a claim or claim limitation. [Emphasis in original.]"; and In 
re Johnston, 435 R3d 1381, 77 USPQ2d 1788, 1790 (Fed. Cir. 2006) ("As a matter of linguistic 
precision, optional elements do not narrow the claim because they can always be omitted."). 
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21 . If a positive recitation is desired and if Applicant(s)' original specification supports such 
an amendment, the Examiner respectfully suggests amending the claim to recite, e.g. "the 
computer program instructions perform. . ." 

Conclusion 

22. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

23. Hicks (7,302,706) provides more details about scanning for viruses across a network. 

24. Sobel (2006/0130139) shows more of the possible security methods possible from the 
client side. 

25. Alagna (2004/0098607) describes a method, system, and computer software for providing 
security for a financial transaction performed online. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Joshua Murdough whose telephone number is (571) 270-3270. 
The examiner can normally be reached on Monday - Thursday, 7:00 a.m. - 5:00 p.m. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Andrew Fischer can be reached on (571) 272-6779. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Joshua Murdough 




